Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
File: sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft (raw, json)
Hash identifier: hMHcZ9dpXGW+6X1u+hCUq/Vwn6N3N4WMVRnQ1I7CFu0=
Subject key identifier: 23:2A:4E:56:60:42:D2:C7:9F:EE:A3:91:1C:3F:04:F9:6C:B3:3C:1F
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 019D375259BD0A2C4EEC6DC3260D4F98347E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 02:00:36 +0000
Manifest this update: Sun 29 Mar 2026 02:00:36 +0000
Manifest next update: Mon 30 Mar 2026 02:00:36 +0000
Files and hashes: 1: 3KMzftpbJOARIPFwkH4LCQGCFNw.roa (hash: kXGt4d9WD7X2Wn0o/hJTyXRdGjpQM8KJT8r0nz9hLnk=)
2: EvXM-b680z9EvOO26D18ZcZMtPQ.roa (hash: yR1psjcP7WJDLXrNWlxvJsBJL/7C/J53luvxS8fesS4=)
3: MbElJ8xEe4i1aAEcPWf9npQhsRQ.roa (hash: y0BpW+ED+DBGHKnzwkRr54CaMuONa/0J2GLDI7kjsb0=)
4: sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl (hash: ZrBASLhU5r7Nc57r0dvwMePzzOMJ94prI2fN566JHrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:59:bd:0a:2c:4e:ec:6d:c3:26:0d:4f:98:34:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Mar 29 02:00:36 2026 GMT
Not After : Mar 30 02:00:36 2026 GMT
Subject: CN=232a4e566042d2c79feea3911c3f04f96cb33c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:59:72:bf:fc:77:4a:2a:71:89:99:fc:15:
97:6b:c6:29:a3:6a:81:67:6d:21:83:c0:7f:ae:e3:
68:0b:cf:7c:49:8d:84:b0:1a:81:de:a6:63:af:78:
f1:f7:2d:da:b6:2b:4d:f2:0b:9e:c8:5d:38:90:db:
1d:de:a7:60:93:e2:4b:19:b7:e0:38:23:60:f9:68:
19:5b:92:5d:39:d4:a4:90:23:f6:ac:f7:33:ed:00:
09:06:c3:75:b0:f2:60:4e:7b:5f:78:bc:e6:ed:6b:
38:68:eb:31:5e:14:b6:59:f2:1a:51:47:aa:41:7b:
29:58:99:cd:14:4b:23:86:da:39:c4:9c:4a:7b:33:
4b:90:88:16:d6:37:ba:0d:6f:78:7a:0d:d1:e3:11:
71:97:75:a1:97:32:0a:6e:33:45:21:8d:25:2a:46:
78:94:ff:fe:47:e5:c9:d2:e6:5b:45:40:59:6a:5e:
5f:95:2c:ac:83:f8:9e:d5:4b:a9:62:9d:2c:1a:1a:
89:e1:72:67:a7:59:d9:48:f5:ca:00:8c:e4:de:99:
6c:7b:94:6b:a2:e2:f4:07:4e:f8:5b:0d:ff:50:96:
89:52:8c:fe:16:8f:04:30:b4:f3:49:9b:a7:8d:a6:
77:80:2f:da:53:86:d4:39:0f:7d:31:d5:46:9f:d0:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:4E:56:60:42:D2:C7:9F:EE:A3:91:1C:3F:04:F9:6C:B3:3C:1F
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:43:66:93:95:42:bc:2a:5b:2a:02:da:34:ee:44:5c:fd:d6:
48:52:c0:b7:b3:fc:fc:b5:ac:95:a2:b0:0d:47:d4:a5:9c:83:
3a:25:f6:b9:8d:af:60:f8:54:5a:8f:60:e8:85:09:d1:0f:40:
42:ca:88:58:f4:aa:c4:50:44:12:6e:75:21:be:f1:b2:e2:2f:
71:72:f2:c1:f1:ba:a6:77:4c:e5:ea:90:f4:75:da:bf:0a:aa:
0f:7a:1a:40:37:f0:db:ce:f9:12:31:64:3b:8a:3b:41:f9:d1:
9c:b6:41:b0:3c:7b:ee:2e:0d:51:64:3f:a3:d6:4f:d5:a4:b4:
e1:41:a0:a4:2c:79:c4:1b:c0:8e:59:0a:5d:0f:b9:6a:ed:49:
4f:01:68:02:9d:d3:75:3c:e4:14:8b:4d:f4:49:26:3a:04:aa:
5a:d3:4e:c5:99:a0:88:9f:3e:dc:95:e3:0c:76:a6:7f:3a:24:
52:f7:31:d4:59:dc:94:83:31:11:19:43:42:a3:11:38:7f:4a:
03:ce:dc:5a:b4:dd:83:ec:e2:e7:f0:1e:ed:28:1e:15:aa:46:
43:b8:92:ae:40:7c:b9:f4:e8:9d:e6:d2:21:5a:dc:ba:ca:77:
8c:f4:80:7b:3b:0e:40:8e:29:82:cd:df:3d:31:cd:b4:67:fd:
63:d9:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:13 2026 by rpki-client